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Foreword 


The Official Information Act 1982 provides that certain information 
is to be protected. This Handbook, issued under Cabinet direction, 
sets out the security measures through which protection can best be 
achieved. 

Security means first of all national security, the interests of New 
Zealand as a country. It also means the due protection to be given to 
the interests of effective government and of private persons. Finally, 
it means having a consistent code of practice to ensure that the proper 
degree of protection is given. 

All Government servants should carefully read this Handbook. It is 
important that they understand their duties and responsibilities under 
the law. Such an understanding is an essential part of the successful 
working of the new Official Information .Act. 
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0 THE NEED FOR SECURITY MEASURES 

The Official Information Act and security measures 

0.1 The main purpose of the Official Information Act 1982 ic “tn 
increase progressively the availability of official information o 
the people of New Zealand”. This purpose is to be bakneS 
against another: “to protect official information to the extent 
consistent with the public interest and the preservation of per- 

sets out the reasons for withholding 
official information in terms of particular interests to be pro¬ 
tected. This handbook deals only with security of official infor¬ 
mation which is entitled or required to be protected under the 
Act. 


0.2 The basic requirement for security procedures is the Slate’s 
responsibility to protect its secrets from espionage, its infor¬ 
mation from unauthorised disclosure, its institutions from sub¬ 
version and its policies from clandestine influence. 

0.3 Security also covers the wider precautions necessary to prevent 
harm: 

• to the interests of the country as a whole; 

• to the interests of individuals and groups; or 

• to the interests of effective government and administration. 

These requirements must be qualified by our traditions of free¬ 
dom of speech and public debate, human rights and individual 
privacy. The balance to be weighed is defined in the Official 
Information Act. 

0.4 It is also in New Zealand’s interest that we should receive as 
much information as friendly countries are prepared to give us. 
Such information is made available on the clear understanding 
that it will be given the same degree of security in New Zealand 
as in the country of origin. We are therefore obliged to maintain 
and enforce comparable personnel and physical security stand¬ 
ards, or we risk being denied essential information. 

0.5 In summary, security procedures must be shown to be necessary; 
and they must operate within the framework of a carefully for¬ 
mulated and consistently enforced policy. 

Authority to release 

0.6 From 1 July 1983, when the Official Secrets Act 1951 was 
repealed, the long-standing convention of not disclosing official 
information without specific reason or authority has been replaced 
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I. .n SoctKMi > ofihc Official Information Act 
1.N ihc rnnopK- ' shall be made available uni 


••uiformanon 

upon ,;,r vvuhholdmg it . 

''‘'v,Th uiihoniN to release or withhold official ffif^ 

; - Emplo'oes ">ih ' up ease by case the public intere«' 

nianon are aciu.na protection of inform^ 

'Th r' Emplo'ecs must theretore be aware of what need*! 
on the otha. I • ^^e degree of damage Hk!? 

or .mproper disclosure ofol^^ 

inforniaiion. 

L nauthorised release 

There are precise sanctions against unauthorised or improper 
disclosure of official information. The oflfences of espionage, 
leakaee and corrupt or improper use oi official information— 
and the penalties for these—are dealt with in the Crimes Act 
lUpi the Summaiy Offences Act 1981 and the State Services 
Act 1^02. Also, other existing specific statutory prohibitions on 
disclosure of information, as for example in the Inland Revenue 
Depanment Act 1974. and the penalties for these, are not over- 
ndden b} the Official Information Act and remain in force. 
Finallv. there are the ordinarv' sanctions of the criminal law 
against other improper disclosures of information, e.g., resulting 
from theft or misappropriation of documents. 

As well as those sanctions, there are the professional and ethical 
standards which apply within the state services and that under¬ 
line the responsibilities of employees. For example, all persons 
who join the Public Serv ice are required to complete a statutory 
declaration to observ e the Code of Conduct for public servants, 
which includes provisions relating to “the use and disclosure of 
information" (Public Service Regulations 1964 Amendment No. 
9 refers). 

Cabinet Directive on Security Classification 

0.10 In deciding the level of protection to be provided through security 
Thp^fi ^^tegories of information need to be considered, 

is relates to likely injury to New Zealand. This 

in the sernnH ^ of security classification. Information 

legitimate concerned with the likely detriment to 

care it is sJhie^ interests. Where this needs special 

sary—endorsemen? procedures involving—if neces- 

ment or organisatioiT^*^^^ suited to the needs of each depart- 


nnless the' 


:re 
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0.11 
0.12 


Cabinet has prescribed the svtiPm 
information or material-see Appendix ? for 

protect ffie SsTnS?n\'erests of t 

the Official Information Act viz out in Section 6 of 

Zealand or the intemational relations of the Cn*^ defence of New 
ypalanH” 0 p ‘^'^.‘^oons ot the Government of New 

Zealand (i.e., national secunty); the maintenance of the law 
and certain important economic interests of New Zealand cL^ 
sification means that special handling and storage procedures Se 
to be used It also means that such information is normally avail- 
able only to people whose trustworthiness to handle such infor- 
mation has been checked. 


0.13 The legal safeguards (referred to in 0.8 above) contain sanctions 
based on the sensitivity of the information concerned and on the 
consequences of its improper disclosure. These sanctions do not 
depend on the classification system; rather, they reflect the seri¬ 
ousness of unauthorised or improper release of official 
information. 


0.14 Cabinet has also issued directions on the use of informal 
endorsement marks—see Appendix 2, paragraph 9.2. In sum¬ 
mary they are to be used sparingly and in a reasonably consistent 
manner. They are not to be used instead of security classifica¬ 
tions. Broadly speaking, the area of sensitive information which 
may need endorsement marks is that set out in Sections 8 and 
9 of the Official Information Act. 


The Interdepartmental Committee on Security 

0.15 Cabinet has directed the Interdepartmental Committee on 
Security to provide guidance on the protection of classified and 
certain other kinds of sensitive information—see Appendix 1 for 
terms of reference and composition of the committee. This 
handbook sets out the basic requirements. It does not give 
detailed advice on all aspects of security. Advice and guidance 
in detail is available to departmental security officers from the 
Secretary of the Interdepartmental Committee on Security, State 
Services Commission, Wellington or the New Zealand Security 
Intelligence Service. 


1 ORGANISATION OF PROTECTIVE SECURITY 
Obligations of departments 

1.1 Every government department' is responsible for establishing and 

1 Reference to permanent heads and departments in this handbook should be read to 
include organisations and their chief executives. 
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. . MS ovsn proiecl.ve securily. Success will depend on 

ma.niain.ng of protection being observed. Each depart 

a common stanu instructions and procedures to con 

nnd consistent policies and minimum standards 
all departments mean that economies can be made 
inlinution cnn be passed on with confidence that i, 
il handled «'tb ProP'" '■'P'P'P"«- Where a 

^ nr has difficuIlN in adopting a particular standard, h 
iSS'^onsult Ns.th the Sccretarc of the Interdepartmental Com- 

mttee on Secunts. 

' Pm-naneni heads are responsible for the security of a department 
and^t is important that they, together with their senior officers, 
Jne a firm lead in security matters. Permanent heads should 
insure that their departments have effective security arrange¬ 
ments administered at an appropriate level; that the arrange¬ 
ments include the provision of suitable physical secunty facilities; 
that staff vetting and security education and training is relevant 
and adequate; that clear and comprehensive security instructions 
are issued and obeved; and that all breaches or suspected breaches 
of secuntc are properh inc estigated and shortcomings corrected. 


1,4 The form of a department's security organisation depends upon 
the size of the department and the nature of the classified and 
other sensitive material which it has to handle and protect. A 
department handling a substantial quantity of such information 
ma> require a specialist security unit closely associated with the 
personnel and administrative divisions, but where this is not 
justified, personnel and physical security should be the respon- 
sibiliu of those divisions. The responsibility for the depart¬ 
ment s securitN arrangements should rest with a departmental 
secunty officer who should be well known as such to all staff 
members. 


Departmental security officers 

partmental security officer should be responsible for; 


accordan."! ° department’s security arrangements i 
ards of securi'/ policies and minimum stanc 

mittee on Securit"^ Inter-departmental Con 
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(b) 


(c) 

(d) 

(e) 

(f) 


liaison with the Secretary- of the Inter-departmental Com¬ 
mittee on Secunty, and with the New Zealand Secuntv 
Intelligence Service and the Government Communications 
Secunty Bureau for specialist advice required on secuntv 
problems; 


the issue and enforcement of departmental instructions on 
secunty; 


routine security inspections; 
security education and training; 
investigations into breaches of security. 


2 SECURITY CLASSIFICATIONS 

2.1 There is a general obligation accepted by government employees 
to exercise care in the handling and disclosure of official infor¬ 
mation. However, in the national interest certain sensitive matters 
require extra protection during their handling and storage. 
Broadly, such matters are likely to cover the security or defence 
of New Zealand or the international relations of the Government 
of New Zealand. They may also include matters affecting the 
maintenance of the law or the national economy . 

Allocation of classifications 

2.2 In cases where disclosure of information to unauthorised persons 
could reasonably be expected to cause damage to national 
interests, users are alerted to the need for special care by the 
allocation of a security classification which is marked on the 
document. 

2.3 The system of security classification laid down by Cabinet—see 
Appendix 2—is an administrative device which; 

(a) underpins the protection in law against unauthorised dis¬ 
closure of information or material likely to damage national 
security or certain other interests of New- Zealand; 

(b) assists departments or organisations in applying appropri¬ 
ate protective security procedures to safeguard such material 
or information held by them; 

(c) indicates to all persons handling such material or infor¬ 
mation that special procedures are to be followed to pre¬ 
vent its unauthorised disclosure. 

2.4 Classification is not a device to conceal violations of the law, 
inefficiency or administrative error, to prevent embarrassment 
to a Minister, department or organisation, or to delay or pre^ ent 
the release of information that does not warrant protection. 
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I, stiould be emphasised that ihe application of a security etas. 

hcation does nol necessanly preyen release of the mformaC 
Ml does the absence of a secunty classification mean tha, 
informalion can be automalically released. Questions of acce"! 
aliiais depend on Ihe substance of the information and whether 
or not II needs to be protected in terras of the Official l„f„" 
mauon Act. 


Classification grades 

'6 There are three grades of classification—‘TOP SECRET’ 
SECRET and ‘CONFIDENTIAL’. Each classification indicates 
the degree of damage to national interests which could arise from 
an unauthorised disclosure. 

TOP SECRET; Information or material the unauthorised 
disclosure of which is likely to damage 

national interests in an exceptionally grave 
manner. 

SECRET: Information or material the unauthorised 

disclosure of which is likely to damage 

national interests in a serious manner. 

CONFIDENTIAL: Information or material the unauthorised 
disclosure of which is likely to damage 

national interests in a significant manner. 

The degree of physical protection of classified information is 
determined by the classification grade. 

-.7 Information or material which requires to be classified becomes 
Imown as “classified” material. The term “material” is used 
because official information is held in many forms including files, 
papers, plans, tapes, photographs, film and microfiche. The same 
pnnciples and similar procedures apply to any equipment which 
requires protection. 


may classify 

pemanent'lfpaiTh'^j^'P'^^ those officers to whom the 

grades to whirh ^^'^Sated authority to classify material. The 
down Classificfltio^ authorise classification will also be laid 
accordance iluh ' ^ care and strictly in 

is responsible for acQP ' Every person initiating a document 
disclosure and mav likely damage from unauthorised 

to the document •’^‘^^^sary, give a preliminary classification 


6 


General principles of classification 

2.9 Deutled instructiops for Ossifying mateml wtll found in 
departmental security instructions. Key guideline • 

(a) that selection of the appropriate likely 

the estimated damage that unauthorised disclosure like y 

to cause; 

that the classification of an individual document depends 
upon its own content, not on the classification of the sub¬ 
ject file or of another document to which it refers, 

that after assessing the likely damage, the lowest classifi¬ 
cation needed to allow effective protection should be 
authorised and allocated. 

2.10 Classifications should be marked clearly and distinctly on the 
documents to which they apply as early as possible during draft¬ 
ing and final production, in accordance with departmental 


(b) 


(c) 




2.11 Over-classification is the error most commonly committed in 
carrying out security procedures. This is objectionable because 
it adds considerably to the expense of the security procedures 
and the manpower needed to carry them out. Even more impor¬ 
tant, overclassification is liable to undermine the effectiveness 
of the procedures themselves. The level of classification should 
be no more than that which will provide the necessary degree of 
care and protection. 

2.12 Where it is clear at the time of drafting that the requirement for 
a security classification on a document will lapse after a limited 
period, or where it is known that the contents will become public 
knowledge at a definite time, a duration of classification may be 
indicated on the document. 


Ire^reauireVm Directive, all government departments 

^r mmeriafanH H a” classified information 

or matenal and provide for its eventual downgrading or declas- 

sificatton. This requirement applies to classified information or 




To minimise ihc ciTort required to i 
“uhlhfton N^car rev-cw rcqu.rcnienl, officers with the necessa^ 
lu honiv should declass.fv or dovyngrade malcnai immediately 
whenever thea^ is opportunitv m the course of ordinary businesj 
i Mosi informaiion or material loses some or all of the reasons 
for dassiticaiion sirnph b\ the passage of time. In recognition 
of this fact, enteria nmH be issued by the Interdepartmental Corn- 
miiiee on Seeunt\ to assist authorised ofneers to downgrade or 
declassih information or material. 


Protection of cljissified material from overseas 
: An\ matenal given a security classification by the government 

of an> other countr>. by any agenev of such a country or by an 
iniemaiional organisation must be protected as if it were New 
Zealand material ot equivalent classification. 

l.\~ \lihough the term RESTRICTED is no longer applied as a 
secuni) classification grade in New Zealand, it is still so used 
b> a number of overseas countries. Material received bearing 
this mark is to be protected in accordance with the standards 
prescribed b> the originator. 


Control of classified material 


1A6 Controls over information and documents deter and impede 
unauihonsed disclosure and improper access, and reinforce the 
“need to know" pnnciple. Control can best be maintained by an 
order!) svsiem ot paper keeping. This enables a department to 
know what classified material it has; where it should be found; 
whether it is where ii should be; and who has or has had access 
to It. Common standards of control are essential if one depart¬ 
ment IS to entrust its classified material to another in the sure 
knowledge that it will be properly protected. 


c iissified maicnal must be locked in security containers when 
not in ase^ If n is necessarv to store documents or materials of 
1 erent c assificaiions together, the standard of storage should 

highest classification. Mini¬ 
fied b\ Thp ^ oi'ihe custody of classified material will be noti- 
^ ^ tied b) the departmental security officer. 

of clasri^^mi?p ^^I^^^I^cts of security that the dissemination 
efficient discharpp ^ '^idcr than is required for the 

onJ\ direc'ie^to Thus classified material 

about'u to enable h. ‘t, or need to know 

ihis principle helns nm ^^ber duties. Adherence to 

P e P™' ‘de protection for the staff member as 
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well as the classified material held by the dcDartm..ni tv,;c 
dple applies both wUhin a depa„„’e„,\t'T: 
persons outside ii. If m doubt whether a proposed rSiem is 
authorised to have access to a piece of classified matenal sta^^ 

Sr t'foT-unty oifi- 

2.21 It follows from the -need to know- principle that the number 
of copies of a classified document and the number of authorised 
persons handling them should be kept to a minimum. Evervone 
who deals with classified material is required to exercise a ncr- 
sonal responsibility for its safe custody. Classified material must 
always be in someone’s personal care, or locked away in secuniv 
containers. This personal responsibility covers all circumstances 
and may call for special action when operating outside normal 
office security, such as when travelling or attending a conference 
in New Zealand or overseas. Staff in the same office or section 
should support each other to ensure that control measures for 
classified material are fully implemented. 


3 PERSONNEL SECURITY VETTING 

3.1 It is common practice in both the private and public sectors for 
employers hiring staff to check on the trustworthiness of appli¬ 
cants, as well as on their qualifications and experience. 

The process 

3.2 The State has a legitimate interest in taking steps to safeguard 
certain kinds of information against improper release. Thus the 
hiring of a person to be employed by the State on sensitive w ork 
involves initially the production of references and testimonials. 
However, where the person may have access to classified material, 
a more formal screening known as vetting, is required. To assist 
government departments the New Zealand Security Intelligence 
Service (NZSIS) carries out vetting enquiries on request—see 
Appendix 3 for the full text of the document on security vetting 
which was published in the Public Service Official Circular on 
15 June 1983. 

5.3 Vetting is the term used to describe the checks and enquiries 
undertaken by the NZSIS to assess, in accordance with estab¬ 
lished criteria, the trustworthiness of persons who are employed 
or are being considered for employment in an area that involves 
access to classified information or material. Vetting is not ini¬ 
tiated by the NZSIS but by a department with the knowledge of 
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Ih- ix-Ron concerned i e. ihe candidale. The NZSIS s reply assists 
imaneni heads in deierm.n.ng that person s fitness to handle 
t,Ts W niatenal. Onlv permanent heads or officers authorised 
m them can grant a security clearance. 


\d't'rse or qualified replies 

; 4 If ^Clung enquiries disclose that a candidate may not be fit to 
be entrusted with classified informaUon, the NZSIS advises the 
candidate's department accordingly in the form of an adverse or 
qualified reph. usually giving reasons. The permanent head can 
then consider the relevance of those reasons m relation to the 
lob content of the position concerned. If the reasons given by 
the NZSIS are the deciding factor for the permanent head in 
gi\ing less than a full clearance, the vetting candidate (unless 
exceptional security reasons c.xist), is notified by the department 
and advised of his or her rights of appeal or complaint. 


4 OTHER SECURITY MEASURES 


Endorsement marks 


4.1 


4.2 


Cabinet has indicated that informal endorsement marks may be 
used h\ departments or organisations to assist in the handling 
of sensitive information that does not require classification as 
prescribed in the Cabinet Directive on Security Classification. 
Endorsement marks are generally to be used to indicate sensi¬ 
tivity or to limit the availability of documents, usually for a rela- 
tn el\ short period of time. Cabinet has directed that there should 
be a reasonable consistency in the use of such endorsements. 
They are not to be used in substitution for security classification 
grades. 


It is therefore important to make a clear distinction between the 
words u^ for the three formal classification grades and the many 
informal endorsements in common use in both the public and 
pnxate sectors. Common examples of endorsements include: 


“Embargoed for release (date and time)” 

"In Confidence”-a general privacy mark 

Confidence”—privacy mark for 
competitive activities ^ 


Staff; In Confidence” 


“Medical ; In Confidence” 
“Private” 


“Personal” 
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Such endorsements or tags can be used, provided that they are 
of demonstrable value. Over-use of endorsements should be dis¬ 
couraged and a proliferation of terms avoided. 

4 3 To avoid confusion between CONFIDENTIAL as a security 
classification grade and the use of that word in the dictionary 
sense, departments should not use CONFIDENTIAL alone or 
in combination with other words in any endorsement mark. 

4 4 Departmental security officers should from time to time review 
the use of endorsements within their departments. The Inter¬ 
departmental Committee on Security will provide guidance to 
ensure that there is a reasonable consistency as directed by Cab¬ 
inet. In short, departments should be able to devise endorsement 
marks suited to their particular needs, but the test should always 
be whether any endorsement mark is necessary. 

4.5 It should be emphasised that the application of an endorsement 
mark does not necessarily prevent release of the information; nor 
does the absence of an endorsement mark mean that the infor¬ 
mation can be automatically released. The question of access 
always depends on the substance of the information and whether 
or not it needs to be protected in terms of the Official Infor¬ 
mation Act. 

Security of Cabinet documents 

4.6 Cabinet documents are not automatically protected from release. 
That does not mean, however, that they are available on request. 
Depending on their content. Cabinet documents—like any other 
information—may receive protection appropriate to the reasons 
for withholding information specified in the Official Information 
Act. Authority to release Cabinet documents within a depart¬ 
ment or to another department is therefore confined to very sen¬ 
ior officers under delegated authority from the Minister. Release 
to any other person or body is, in the absence of specific dele¬ 
gations, solely a Ministerial responsibility. Guidance on the 
handling of Cabinet documents is contained in the Cabinet Office 
Manual. 


Protection of personal privacy 

4.7 The preservation of personal privacy requires strong Projection 
from release of personal information to anyone not entitled to 
have access to it. Personal information is to be released only 
after the applicant has been satisfactorily identified as the subject 
of infnrmatinn nr to a properly authorised agent. 
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4 .^ 


Control of entr> ^ building are necessary when the 

4.8 Defences building needs to be protected. Sometimes 

material w ithin that '^^^g^^ess to certain parts of a building 
11 is also necessan ^ ^ security clearance. Control of entry 
onl> to "Ji nf buildings is best exercised by admitting 

bu.ldmgs “Taf few entrances as practicable and 

^'^rth^sls^so 'pS'e. on a rccogni.ton or pass systent. 

„,i m, hours if classified or other sensitive material is 
no“.TmK-c ed bv locked containers, it is the responsibility of 
no ■ a of supervisors in large units (such as regis- 

mt'an" i pt pools) m ensure that it cannot be read, handled 
0 remoN ed bN^persons not authonsed to do so. If a room ts to 
Z left unoccupied, classified or other sensitive matenal (includ¬ 
ing uasie) should be locked away in appropriate containers during 
an\ absent of more than a period to be specified m depart- 
menta^secu^t^ instructions. At the close of work, the occupants 
of a room should ensure that all such material including waste 
has been locked away. 


4 10 Officers working in areas to which the general public has normal 
access should take special care to prevent access to classified and 
other sensitive material. 


ke>s and combinations 

4.11 It IS essential to protect keys and combination lock settings. There 
should be arrangements for the safe custody of keys, for the pro¬ 
tection of combination lock settings and for early action if a key 
IS lost. Staff must account for all keys held by them. Combina¬ 
tion lock settings should be committed to memor>' and not writ¬ 
ten down. 


Control of photocopying machines 

4 ]_ Access to photocopying machines, including microfilming equip¬ 
ment and facsimile machines, must be controlled to prevent 
unauthonsed or improper use. Control arrangements will vary 
according to the circumstances in each department and the type 
0 machines used. In offices where there is an appreciable amount 
0 c assihed and other sensitive material, arrangements must be 
e to immobilise machines outside working hours and to 
^upenise them when in use. 
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Security of Automatic Data Processing (ADP) systems 

4.13 The use of computers for the storage and retrieval of official 
information, and of word-processors and other forms of See 
automation, can pose a threat to security, especially when sSh 
information is classified or is of a sensitive or personal nature 
The amount of data that is capable of being stored upon a Se 
disc or magnetic tape, and the rapidity with which data can be 
retrieved, mean that such information can become extremelv 
vulnerable to unauthonsed access. Specialist advice can be sought 
through the Interdepartmental Committee on Security. 

4.14 Broadly, ADP security covers all aspects of the protection of the 
data stored, handled or processed in a computer or ancillary 
device from unauthorised access, interference or destruction. ADP 
security measures should be applied to all forms of data pro¬ 
cessing equipment, whether a large multi-user installation or a 
small, single operator, dedicated system. Many of these security 
measures are equally relevant to unclassified, but sensitive, infor¬ 
mation which needs protection for privacy or other reasons. 


4.15 Users of facsimile machines should be aware that the facsimile 
process does not provide sufficient security for the transmission 
of classified information. 


Destruction of waste 

4.16 Waste paper bins and rubbish receptacles are notorious sources 
of “leakage” of classified and other sensitive information; they 
must not be used for disposal of such matenal. Special care should 
be taken of classified and other sensitive waste pending its dis¬ 
posal. Ideally it should be kept aside in a separate receptacle (a 
large envelope will normally do). Until it is properly disposed 
of, classified and other sensitive waste should be given the appro¬ 
priate degree of protection. Departmental security officers, 
depending on their department's function and the quantity of 
classified and other sensitive information to be destroyed, should 
make proper arrangements for destruction by burning, pulping 
or shredding under controlled conditions. 

Security of speech 

4-17 Employees should be discreet in conversations with persons who 
do not have authorised access to classified or other sensitiu^ 
information, during and outside working hours. Care s ou ' 
taken in telephone cons ersations to avoid relerence to t 
and other sensitive information. Gossip and careless ta in 
•ic places about such matters must bo asoided. and arc a 
ousable breach of good security practice. 
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5 BREACHES OF SECl RITV 
Obligations of employees 

5 1 Ever> employee is likely to become the trustee of much official 
mfo?maiion of a sensitive nature. It is important therefore that 
staff understand that official information acquired in the course 
of dutv must not be disclosed to or discussed with any other 
person go\emment employee or otherwise, without proper 
Lihontv Employees should be alert to the need for discretion 
at all limes; an inadvertent breach of security can be as serious 
as a deliberate breach. 

5.2 \S hen a breach of security occurs, the main objectives are: 

• to find out exactly what has happened 

• to assess the degree of compromise and minimise the dani" 
age done 

• to Dre^•ent a recurrence. 


Reporting of breaches 

5.3 An\ breach of security is to be regarded seriously. It is the 
responsibility of all staff to advise their controlling officer or the 
departmental security officer immediately of any breach, sus¬ 
pected breach, or situation conducive to a breach of security so 
as to allow the matter to be investigated. If the breach relates to 
another department, the matter will be referred for investigation. 

5.4 .A breach of security may be inadvertent, or it could amount to 
a breach of trust. In some circumstances it may even involve a 
criminal act. The Official Information Act 1982 sets out all the 
interests which need to be protected. The Crimes Act 1961, Sum¬ 
mary Offences Act 1981 and State Services Act 1962 contain 
sanctions against unauthorised or improper disclosure of official 
information. In addition there are other statutes which further 
protect sensitive information and which include penalties for 
unauthorised or improper disclosure. 

5.5 The public interest demands effective, efficient and loyal state 
services. There must be absolute confidence in the integrity of 
employees, which means acceptance of and adherence to the pro- 
V isions of the codes of conduct laid down in the declaration to 
be made by persons employed in the Public Service. Employees 
are expected to exercise common sense at all times, to respect 
t e confidences entrusted to them and to share the responsibility 
tor maintaining security. 
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appendix I 


terms of REFERENCE FOR 

Ipproved^bySi^^^^^ 

* departments^’and orgaffis^S‘U-ih deta^ed* 

cies and administrative procedures necessS to imnT 
consistent manner the system of securitv m a 

in the Cabinet Directive CO(82)14 of H 

2 In pursuance of its task the Committee shall issue instructions 
,0 departments and organisations in the form of a ScuA. 
Handbook in one or several parts so that unclassified and S 
ified tnforma ton or matenal contained therein is kept sepaiSe 
The Committee shall review regularly and update as necessare 
any instructions so issued. 


3 The Committee shall also provide guidance on the use of other 
endorsement marks to assist in the handling of other informa¬ 
tion or material of special sensitivity (not being national security 
information or material as prescribed in the Directive), the aim 
being to ensure that such informal marks are not used in sub¬ 
stitution of security classification grades and are applied in a 
reasonably consistent manner. 


4 The Chairman of the Committee shall report at least annually, 
through the Minister of State Services, to the Prime Minister on 
the implementation of the Directive and make recommenda¬ 
tions which will advance its purpose. 


Composition and Servicing of the Committee 


5 


6 


The Committee shall include representatives from the State Ser¬ 
vices Commission, the Prime Minister’s and Justice Depart¬ 
ments, the Ministries of Defence and Foreign Affairs and the 
New Zealand Security Intelligence Service under the chairman¬ 
ship of the representative of the Prime Minister s Department 
and be otherwise serviced by the State Services Commission. 


The Committee may co-opt representatives 
ments and/or organisations where matters 
ticular interests are under consideration. 


from other depart- 
affecting their par- 
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M'I'I M)|x 


( ()(82> 14 
I ■» r>c\cmbt'r l»iH2 


. V, 1 Hll\ ( I V'vSlUt VIION 
VB.MI 1»IRM'T1^^ ON 


Pnri-'Nf 

VV-: : > ^ 

- tk'j'uV' tVst (>vi-pi<.'aN 

V-.--.:' t.' Ix' f irM Instituted 

' V. t* i .as'- *' 

- *s^**j' c‘* t. T/^jtt^'n 

V ano IVvlasMfi^JiK’n 

’~-c'x:un^<rr)‘u <. ommiitev on Securits 

T vr^.r’^rr! 

jf,;dcO to maKe ortieial inibrmaiion. i.e., int’or- 

— • ,- ixnm’rd hc o t" the vanous organs ot governmcnl, 

-n-'v aval jMc to the people of Neu Zealand. Bearing in 

- -vi the rrsp.'nsjt'ilit,- t.hat Parliament has also placed upon the 
Evec't'vf C/O'ftTimen* to protect official information to the 

'aiw.red hv the national interest, there is a need to enhance 
a’vd the mears h' ivhich such information should be safe- 

f-i'Ord aga.nst improper release. 

: ihat eno (abmet <( M 82 52 24 of 13 December 1982) has 
ag^ecc i-ha* a uniform s>sicm of secuni> classification be insti- 
"uted ihra ijfh otii the po'cmment sersice and for that purpose 
has directed that the pnnciples and criteria in this ('ircular arc 
to fst ohserxed in appJ>5ng tJassifiliations to national security 
inftrrmauon and leriain other official information. 

The s'sicrr. of sctuni;. classification is to be regarded as an 
administrali'e device 

• 10 underpin the protection in law against unauthorised dis¬ 

closure of informaiion or malenal likels to damage national 
sccuni) or certain other interests of New Zealand, 


If) 


«»—■''•■■a 




""'*fni4lion or 


procedures lor i.„. 

rnaicnal held by them, _ 

to indicate to all persons handling s,,. K . 
niaicnal that it must be treated m act 
procedures designed to prevent the unaulhori'sed 
of such information or material Uivlosurc 


1 

1.1 


1.2 


The fact that any information or material has been assimrU 
security classification will not of iiscll prohibit or prevent .it 
release provided that release is properly authorised nor voii the 
absence ol a classification necessarily mean that it may be trecU 
released. Classification is a guide to procedures for handling, 
storage, transmission of, or access to information or malenal 
which must be protected. 


Security classifications in themselves arc not CMdence at law that 
the content of the information or malenal neccssanh wananis 
the protection of the law from unauthorised disclosure Depend¬ 
ing on the case this can only be established by a competent escc- 
utive authority, or an Ombudsman, or a court testing the content 
of the informaiion or malenal to discover whether ns unau¬ 
thorised disclosure is likely to damage national inicrtrsts in any 
degree. 


Prescriptions for Classification Grades 

Prescriptions for applying the threx* grades ot sccunty classih- 
calions are: 


TOP SEC RET; Information or material the unauthor¬ 
ised disclosure of which is hkely to 
damage national interests in an evci'p- 
tionalh c'rjif manner 

SECRET: Information or material the unauthor¬ 

ised disclosure of whivh is likely to 
damage national interests in a vcnoio 


CONFIDENTI \L; 


manner. 
Information or 
iscd disclosure 
damage nation 
iji;,’ m.inner 


material the unauthor- 
of which IS likely to 
al interests m J 


I 


The class,fica.,om in sub-paragraph 2-1 ^PP]^ 

in accordance v^ith the damage that is likely to result trom the 
unamhorised disclosure of infomanon or matenal relanng ,o: 
ihe secunly, defence or intemalional relations of New 
Zealand. 

^ Thfs rla^ifications in sub-paragraph 2.1 above may be applied 
" Ilso .^Scordance with the damage that is likely to result from 
the unauthonsed disclosure of information or matenal of spectal 
sensitivity relating to the following interests of the State. 

(a) the maintenance of the law; or 

(b) the economy ot New Zealand. 

4 \ handbook for applying security classifications in practice shall 

“■ be issued by the Interdepartmental Committee on Secunty— see 
paragraph 9 below. 


3 Classifications Originating Overseas 

3.1 The Government of New Zealand has international obligations 
as well as a statutory responsibility to maintain for classified 
information or material received from New Zealand’s allies or 
from international organisations a level of protective security not 
less than that in force in those overseas countries or organisa¬ 
tions. There must therefore be reasonable compatibility with the 
security classification procedures of New Zealand s allies, or. of 
international organisations. 

3.2 When the classified information or material of the government 
of another country, or of an international organisation, is 
entrusted to the Government of New Zealand and utilised in 
creating other information or material, that information or 
material must be safeguarded so as to provide protection not 
less than that applying to the original information or material. 

4 Protective Security Measures to be First Instituted 

4.1 Before any classified information or material is accepted or cre¬ 
ated by a department or organisation, the permanent head, or 
in the case of an organisation, the head of that organisation, has 
a duty to ensure that protective security measures have first been 
instituted adequate for the levels of classification to be applied. 

5 Authority to Classify 

5.1 Permanent heads of departments or heads of organisations, are 
hereby vested with authority to classify in accordance with the 
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prescriptions in this directive The 
ment or head of an organisation of a depart- 

sify to officers of appropriate seniorit fo das- 

orgamsation. y ot that department or 

5 2 A security classification is to be anniig.^ . 

responsible IS satisfied that the informati^"^ ^^cer 

that classification in terms of one of '^®™nts 

directive. f^e prescriptions in this 


6 

6.1 


Avoidance of Overclassification 

Overclassification must always be avoided it ic • 
on grounds of managerial efficiencv and ** objectionable 

S fnto Spuir 


7 

7.1 


Duration of Classification 


fication grade may be indicated on a document or other material 
at the end of which time the classification shall lapse. 


8 Downgrading and Declassification 

8.1 Departments or organisations shall institute a systematic review 
of all classified information or material and provide for the 
sequential downgrading or declassification of that information 
or material. This review shall be applied to classified informa¬ 
tion or material originating from 1977 onwards. The aim shall 
be to conduct the first review of classifications ten years after 
they are first applied, i.e., in 1987. 

8.2 Wherever there is opportunity in the course of ordinary business 
for an officer with the necessary authority to declassify or down¬ 
grade immediately, he or she shall do so. 

8-3 Most information or material becomes divested of some or all 
of the reasons for classification simply by the passage of time. 
The Interdepartmental Committee on Security shall devise cri¬ 
teria to assist permanent heads of departments and heads of 
organisations in achieving—in the shortest practicable time-—a 
rnaximum downgrading of, or removal of classification gra es 
from, information or material consistent with national secunty, 
ss well as the requirements of economical management. 
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g Interdepartmental ^ on^^Security shall provide 

9.1 The Interdepartmental Com detailed guidance on poh- 

departments and dures necessar> to implement in a 

cies and admimstratne proce r pyrity classifications pre- 

consistent manner the systen 

scnhed m this -.g guidance on the use of other 

^.2 The Committee shall also p handling of other informa- 

endorsement marks to .^^*** • ^ (not being national security 

tmn or matenal ot special sensi^ this directive). There 
information or ‘ns^stency in the use of such endorse- 

Se\[m Wni'o ensure .ha. .hey are no. used in sub- 

s„.u.ion on Seenri.y 

shall repon «„n Sple of this direc- 

™\eromS»ons «h.eh w,l. advance .he purpose 

Stated in the preamble. 

10 Commencement 

TO have been promulgated on 1/ 
D^embeM98:^^t is to be implemented on and from 1 July 
19S3. 


appendix 3 


unclassified DOCUMENT ON VTTTING PROCEDURES 

Preamble u thr. 

\ ettine is the term used to describe the inquiries 
Ne'^ Zealand Secunty Intelligence Service as to the jrustworthmMS 
of persons employed or whom it is proposed to employ m oovem 
ment departments. 

The Report of Sir Gu> Powles’ inquiry into the New Zealand 
Intelligence Service 1975/6 recommended that an unclassified ® . 
ment be made available generally to give as full an account as possi 
of these vetting procedures. 

The Cabinet has accepted that recommendation (CM 83/13/8 
April 1983) and approved the general release of this document whic 
describes the practice of vetting and the manner in which vetting is 
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practice of Vetting 

It is common practice in both the private and public sectors for 
hinng staff, to check on the trustworthiness of 
applicants as well as on their qualifications and experience* the 
degree of checking may range from personal enquiries and the 
nerusal of references to a more detailed review by a person acting 
on behalf of the employer. 

The State has a legitimate interest in taking steps to safeguard 
certain kinds of information against improper release. No system 
of protection will work unless those concerned are themselves 
trustworthy. Thus the hiring of a person to be employed by the 
State on sensitive work involves initially the production of refer¬ 
ences and testimonials. However, where the information to which 
the person will have access bears a security classification of 
“Confidential” or a higher grade, a more formal screening is 
required. To assist government departments and organisations 
to assess the trustworthiness of employees required to work with 
such information, the Security Intelligence Service carries out 
vetting enquiries on request. 

In 1976 in reporting on his enquiries into the New Zealand 
Security’ Intelligence Service, Sir Guy Powles, then Chief 
Ombudsman, found vetting to be a prime function of the Service 
that should be continued. He also recommended that an unclas¬ 
sified document be issued within the State Services 
as far as practicable the manner in which vettmg is undertake . 

The subsequent proposals of the Danks 
Information and the D.«n.ve °n Ctata 

issued on 17 Decembei 1982 ^ J powles— 

partly from the related recommenda Y principles 

that consideration be given to an exa ff., cgcurity purposes 
and practice of classification of information for secunty p rp 

within government departments. , . . „ ..nifnrm svs- 

The Directive states that Cabinet has a^ee tha ^^^ 

tern of security classification be the pnn- 

govemment service and for that . ^ved in applying clas- 
ciples and criteria in the Directive • ^nd certain other 
sifications to national security in . grades of classification 

official information. It provides for three gr 
with prescriptions as follows; unauthorised 

TOP SECRET: Information ukely to damage 

disclosure of whic g^cepnonally gw'f 
national interests m an 
manner. 


SECRET: 


CONBOENTIAL: 


T ,„rTT.;,t,on or material the unauthorised 
d"Sure of which is likeh to damage 
Snal interests in a senous manner. 

, f..rT^;,tion or matenal the unauthorised 
wSu e of 

Sonal 

- - c^^tem orescnbed by the Directive is 

■n,.. socuntx olassincaaoo s ! era Pr 

lobereaardedasanadmirasl.ali'e 

. .0 'onde^ra .de 

oTd? ^ of sew Zealaod: 

rn assist the internal administration of departments or 
* orE^msItions in apphtng appropnate protective ^cunty 
pSXes for the safeguarding of such information or 

matenal held by them: 

. to indicate to all persons handling such infonnation or 
Ltenal that it must be treated in accorc^nce ^th certain 
procedures designed to pre% ent the unauthorised disclosure 
of such infonnation or material. 

Cassihcation markings v.ill therefore act as reminders that crim¬ 
inal sanctions or disciplinaiy provisions in the relevant statutory- 
amendments arising from the passage of the Official Information 
Act 1982 Ithat replaced in part the Official Secrets Act 1951) 
could be applicable to the improper disclosure of specified types 
of infonnation. They also indicate that special precautions are 
necessary to protect certain information—special handling and 
storage procedures are to be obsers'ed and the type of infor¬ 
mation in question is normally to be available only to designated 
people, i.e.. people whose trustworthiness has been checked. 

Accordingls . all who have access to information protected by the 
secunt> classification ssstem have a responsibility to prevent the 
improper disclosure of such information so that it cannot be 
used to the detnment of New Zealand. This applies not only to 
such mformation generated within New Zealand, but also to 
classified information supplied to New Zealand by fnendly coun¬ 
tries under arrangements and understandings that it is given 
similar protection m New Zealand as in the country of origin. 

Apart firom other protective security arrangements within a 
department or organisation, it is necessary to ensure that every 
person having access to classified information is trustworthy, 
ai toward ensuring this is the security vetting system—any per¬ 
son empoyed or being considered for employment on work 
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ins olving access to matenal classified CONnDENTlAL or hisher 
must first be granted a security clearance to the appropriated^ 
by the departmental head. ^ ” 


jlje Manner in which vetting is undertaken 

10 N etting is the term used to describe the checks and enquiries 
undertaken by the New Zealand Security Intelligence Service 
(NZSIS) to determine, in relation to established relevant criteria, 
the trustworthiness of persons who are employed or are being 
considered for employment that involves access to classified 
information or material. Such vetting is conducted with the 
knowledge of the candidate and at the request of the Govern¬ 
ment department or organisation concern^ The iMffies assist 
permanent heads with their determination of a person's fitness 
to be granted a security clearance. Vetting is not initiated by the 
NZSIS but by the permanent head of the vetting candidate's 
department, who has to decide whether that person is ^ven a 
security clearance or not. 

11 Several matters are given anention by the department before a 
vetting request is forwarded to the N^IS. The first is the deter¬ 
mination of the candidate’s need to have access to classified 
material and of the classification level (TOP SECRET, SECTRET 
OR CONFIDENTIAL), or the special nature of the infonnation 
to be handled by that candidate. The department’s advice to the 
NZSIS as to the level of classification involved determines which 
vetting process is relevant—a TOP SECRET, a SECRET or a 
CONnDENTlAL vetting- 


12 
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The department also undertakes a check of its personnel record 
of the candidate to ensure that the personal particulars 
full name, date and place of birth, and nationality ) provided by 
the candidate are accurate, and to determine ^ 

any impediment of character or back^ound - f-andi<1ate 

available to the department which might make ^ . 

unsuitable for access to classified information, n 
vetting candidate is not a New Zedand outside New 

Zealand spouse or close relationships or consider 

Zealand, the department or organiMtion arise from 

whether a conflict of personal or national o> . 
the work envisaged for the candidate. 

Upon receipt of a vetting ^^^ccordinri^the level of 

mem, the NZSIS conducts its enquines enautrv. 
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These are conducted in order of increasing intensity, commen- 
siS >Mih .he Cabiae. D'reet.vt 'J' three 

elassifica.iohs of CONFIDENTIAL. SECRET and TOP 
SECRET:- 


CONFIDENTIAL Vetting 

Personal details are provided by the candidate and forwarded 
bv the department to the NZSIS. The names of the candidate 
and his or her spouse and parents are checked ag^mst NZSIS 
records and the candidate against Police records. Further enqui- 
nes ma> be made if a need to do so becomes apparent. 


SECRET Vetting 

Personal details of the candidate and his or her spouse, parents, 
brothers and sisters, and relatives living overseas are provided 
bN the candidate and checked against Police (candidate only) and 
NZSIS records. The candidate also provides additional infor¬ 
mation such as details of education, residential addresses and 
particulars ol previous employment, overseas countries visited 
or resided in. and is asked to indicate whether he or she has ever 
^ 550 ciated in anv way with a communist or fascist move¬ 
ment. The names of four persons resident in New Zealand who 
can act as referees are also given. Enquiries are not always made 
in relation to the additional information given or of all the per¬ 
sons nominated as referees unless a need to do so is indicated. 


TOP SECRET ^ etting 

The same information is given by the employee as for a SECRET 
vetting. In addition to checking against Police (candidate only) 
and .NZSIS records, checks are made in relation to the additional 
information gi\ en. Enquiries are made of the referees named by 
the candidate and of such others as may be able to assist, includ¬ 
ing the candidate, if any factors arising from the routine enqui¬ 
ries indicate a need to do so. 


\’etting reviews 

14 Reviews of SECRET and TOP SECRET security clearances are 
conducted regularly, normally at five year intervals, but also in 
the event of a change in circumstance. 


Adverse or qualified replies 

enquiries disclose that a candidate may not be fit to 
be entrusted with classified information, the NZSIS advises the 
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canuiuai.. c UA-Hcx. atcuroingly m thp r 
qualified reply. This reply would usually or 

NZSIS raising the presumption of unfitness anH for the 

head can then consider the relevance of those Permanent 
to the job content of the particular position 
candidate. Should the reasons given by the NZSK wf 
ing factor in the permanent head giving less than a fuU etea“t 
and unless exceptional secunty reasons exist the vettino f 
didate is notified by the department together vJith advice re^rl!' 
ing his or her n^ts of appeal or complaint. An appeal cSZ 
made under Section 38 of the State Services Act 19W should a 
transfer on secunty pounds be involved, or a complaint can be 
made to the Commissioner of the Security Appeals under th? 
NZSIS Act 1969. 


P. D. Hasselbcrg. Govemmeni Pnnier, Wellington, 


New Zealand—1983 
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